Trust is built into every step.

Zelver Security Technologies Ltd, company number 17580541 ("we", "us", "our"), is the Data Controller for personal data processed through the Zelver platform. We are registered in England and Wales.

What data we collect

• Security Officers: name, email, phone number, SIA licence number and type, identity documents (passport or driving licence), right to work documentation, GPS check-in and check-out coordinates (during active shifts only), and face verification images (with explicit consent, per request).
• Businesses: company name, trading name, registered address, Companies House number, contact name and email, and site addresses.
• All users: account credentials (passwords are hashed and never stored in plain text), session data and platform activity logs.

Why we collect it

• To verify SIA licences and confirm right to work eligibility (legal obligation).
• To manage shift assignments, attendance records and timesheets (contractual necessity).
• To generate invoices and process payments (contractual necessity).
• To keep an auditable record of deployments (legitimate interest and legal obligation).
• To carry out face verification checks during active shifts (explicit consent, obtained during onboarding and per request).

How long we keep it

Account data is kept for the life of your account plus 7 years, the statutory retention period for financial records. Identity and licence documents are kept for the duration of active work plus 2 years, consistent with SIA requirements. GPS and face verification data from shifts is kept for 12 months from the shift date, then securely deleted. You may ask us to delete non-statutory data at any time.

Your rights

Under UK GDPR you have the right to access your personal data, correct inaccurate data, request deletion (where no legal retention obligation applies), object to processing, and data portability. Send requests to privacy@zelver.co.uk.

By creating an account on Zelver you agree to the following terms. These terms form a binding agreement between you and Zelver Security Technologies Ltd.

Security Officer accounts

• You must hold a valid, in-date SIA licence to work shifts on the platform.
• You are responsible for keeping your documentation current. Shifts cannot be confirmed if your licence has expired.
• GPS check-in is mandatory for every shift. Failing to check in within the grace period may lead to shift cancellation and may affect your rating.
• Face verification checks may be requested during any active shift. Declining a requested check may lead to a logged incident and a review of your account.
• You may not present false credentials or claim to hold a licence type you do not hold.

Business accounts

• You are responsible for keeping your site information accurate and up to date.
• Shifts must be posted with an accurate location, hours and licence type requirements.
• Approved timesheets are acceptance of the worked hours for invoicing purposes.
• You may not instruct Security Officers to carry out duties outside the scope of their SIA licence type.

Platform conduct

Zelver may suspend or deactivate accounts that breach these terms, submit false information, or act in a way that undermines the integrity of the platform or the safety of other users.

Liability

Zelver acts as a platform connecting Security Officers and businesses. We are not the employer of Security Officers, nor a direct provider of security services. Security Officers are responsible for their own conduct on site. Businesses are responsible for meeting any site-specific obligations under applicable law.

Zelver processes personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our legal bases for processing are:

• Contractual necessity for account management and shift operations.
• Legal obligation for licence and right to work verification.
• Explicit consent for biometric face verification.

Special category data

Face verification images and biometric data are special category data under UK GDPR. We process this data only with explicit, informed consent, obtained separately from general account registration. You may withdraw consent at any time. Withdrawal means face verification checks cannot be carried out during your shifts, and may affect your ability to be assigned to certain clients.

Zelver follows ICO guidance on Data Protection Impact Assessments (DPIA) for its face verification feature.

Data transfers

Personal data is held with hosting and storage providers that offer UK or European Economic Area data residency. We do not transfer personal data to third countries without appropriate safeguards. Details of these providers are available on request from privacy@zelver.co.uk.

Data breach notification

If a personal data breach occurs, we will notify the ICO within 72 hours of becoming aware of it, and tell affected individuals without undue delay where the breach poses a high risk to their rights and freedoms, as Articles 33 and 34 of UK GDPR require.

Contact

Data protection enquiries: privacy@zelver.co.uk. To make a complaint, you may also contact the ICO at ico.org.uk.

Zelver collects GPS location data and, where consented to, face verification images from Security Officers during active shifts. This monitoring is necessary for operational verification and client assurance. We operate within ICO guidance on the lawful monitoring of workers.

GPS tracking

• Scope: GPS location is collected only during active shifts, from check-in to check-out. Location tracking stops automatically when a shift ends.
• Purpose: to verify attendance on site, confirm check-in and check-out times, and produce accurate timesheets. Location data is not used for any other purpose.
• Transparency: Security Officers are told about GPS collection during onboarding and at every check-in. There is no covert tracking.
• Retention: GPS records are kept for 12 months from the shift date, then deleted.

Face verification

• Consent-based: face verification is only carried out with explicit consent, obtained separately from general account acceptance. Consent can be withdrawn at any time.
• Per request: checks are requested during shifts, not continuously. Security Officers receive a notification before any check begins.
• Purpose limitation: images are used only for identity verification during the active shift. They are not used to train AI models or for any other purpose.
• DPIA: face verification is high-risk processing of biometric data. Zelver follows ICO guidance on Data Protection Impact Assessments, as UK GDPR Article 35 sets out for this kind of processing.

The Security Industry Authority (SIA) regulates the private security industry in the UK. Zelver is designed to work in full alignment with SIA requirements and to actively support compliance by everyone on the platform.

Licence verification

Every Security Officer on Zelver has their SIA licence verified before they can accept any shift. Verification covers the licence number, licence type, expiry date and current validity status. Security Officers are reminded before their licence expires and must upload a renewed licence before being assigned to new shifts.

Licence type matching

Security Officers are only matched to shifts that fit their specific SIA licence type. A Door Supervisor is not assigned to a role that needs a CCTV Operator licence. The platform enforces this matching. It is not left to the business or the Security Officer.

Reporting obligations

Zelver co-operates with the SIA and relevant authorities as the law requires. If the SIA revokes or suspends a Security Officer's licence, their account on Zelver is suspended once we become aware of it. Businesses are told if a Security Officer deployed to their shifts becomes unlicensed.

Right to work

As well as SIA licence verification, Zelver collects and reviews right to work documentation for every Security Officer during onboarding. This is a statutory obligation under the Immigration, Asylum and Nationality Act 2006.